Lucene search

K
cve[email protected]CVE-2021-33633
HistoryMar 23, 2024 - 12:15 p.m.

CVE-2021-33633

2024-03-2312:15:07
CWE-78
web.nvd.nist.gov
30
cve-2021-33633
os command injection
openeuler
linux
command injection
nvd

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in openEuler aops-ceres on Linux allows Command Injection. This vulnerability is associated with program files ceres/function/util.Py.

This issue affects aops-ceres: from 1.3.0 through 1.4.1.

CNA Affected

[
  {
    "collectionURL": "https://gitee.com/src-openeuler",
    "defaultStatus": "unaffected",
    "modules": [
      "ceres"
    ],
    "packageName": "aops-ceres",
    "platforms": [
      "Linux"
    ],
    "product": "aops-ceres",
    "programFiles": [
      "https://gitee.com/openeuler/aops-ceres/blob/master/ceres/function/util.py"
    ],
    "repo": "https://gitee.com/src-openeuler/aops-ceres",
    "vendor": "openEuler",
    "versions": [
      {
        "changes": [
          {
            "at": "261133e1d33ed24fedc775e426740dc749108310",
            "status": "unaffected"
          },
          {
            "at": "6aa4bd6c9e8cda79856343d9573170e85081a44d",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "1.3.0",
        "versionType": "git"
      }
    ]
  }
]

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

Related for CVE-2021-33633